Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2ba03686-e1cf-3511-aebd-2ca26c0d8221.roa
File: 2ba03686-e1cf-3511-aebd-2ca26c0d8221.roa (raw, json)
Hash identifier: 4q3GWIMBZWJ2YHNvFmI1M6XfV+8xQySkX1wmMsV5Y9Y=
Subject key identifier: B7:D9:95:82:2C:25:7A:24:2E:A0:24:F6:D1:16:BD:BC:C2:15:C6:8A
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584832F03123753E484447480B80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2ba03686-e1cf-3511-aebd-2ca26c0d8221.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 202
IP address blocks: 130.174.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:31:23:75:3e:48:44:47:48:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=cf290cb8-d798-4789-b6f7-178d8d39c450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:d9:7a:dd:6a:ab:ef:eb:8b:dd:e3:4c:3c:
c1:75:ef:ff:f2:70:42:23:8d:a1:0e:9d:a3:82:75:
8d:3c:30:46:93:5b:4c:94:30:23:41:48:4c:ae:de:
84:57:a7:02:3f:a0:e4:d4:69:e3:31:f3:e4:3f:fb:
d5:fd:a5:90:91:db:97:f2:e4:cc:67:f6:2f:7f:4e:
1d:83:6f:5e:2b:60:69:b7:ff:4b:8a:9e:4c:77:6e:
a1:aa:e0:35:66:56:eb:bd:3b:ff:c3:4c:f3:c8:7d:
82:a2:50:ac:fb:2f:2f:17:29:82:0e:45:76:e7:1d:
d4:06:68:5a:c4:0d:fe:a7:3d:00:3a:0a:08:e4:c0:
c0:4d:39:9f:48:4b:7e:cb:78:8c:8d:ae:95:c7:4b:
85:29:bf:03:cf:91:2a:15:e9:e2:d9:2f:42:90:03:
09:54:c2:c4:e2:fd:93:c0:8e:be:de:af:b0:da:55:
86:26:a3:cb:8e:42:68:17:bc:89:90:96:6d:85:68:
8a:4d:c9:01:ab:d0:15:22:9b:34:a3:bc:d9:b2:be:
58:d4:0c:47:05:1d:28:b6:ea:f1:1c:b5:af:21:d3:
41:d2:dd:89:d4:ed:cb:5a:23:68:bd:eb:1e:8d:c2:
05:01:cc:2a:00:5b:d8:1c:ea:12:a9:01:af:80:e4:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D9:95:82:2C:25:7A:24:2E:A0:24:F6:D1:16:BD:BC:C2:15:C6:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2ba03686-e1cf-3511-aebd-2ca26c0d8221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
130.174.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:0f:51:12:ee:c1:cd:30:01:bc:d2:01:7d:e7:f6:d7:63:56:
51:cb:1e:a1:67:91:54:ee:ee:7e:dc:be:ce:5b:64:df:fd:a4:
7c:c6:d8:d5:f8:9d:31:09:62:43:a6:75:25:f0:7e:f3:42:52:
6e:71:85:a4:4e:6f:02:b3:c0:86:80:84:44:c8:7b:d7:54:03:
bb:10:a1:04:f4:58:73:1d:7e:7e:dc:ff:56:75:75:73:0f:44:
24:07:4a:ec:11:63:63:20:a3:c2:fb:fb:a9:50:7e:66:4c:e1:
d9:c8:a7:99:75:5a:00:91:d7:f7:ef:61:b5:bd:b4:e5:99:33:
94:4b:2a:20:02:9a:3d:2c:d0:2d:38:57:8a:27:b1:d3:9b:04:
9b:48:29:a6:80:61:c4:98:d0:cb:d9:4e:d0:57:dc:82:99:8e:
d3:2b:e2:e8:d8:f6:7f:75:a9:53:b9:4d:73:49:23:b9:0b:00:
1e:ab:18:85:44:dd:74:a2:4d:68:1a:b9:69:25:1f:02:c6:e3:
87:2c:1c:c2:e6:82:3c:19:14:a6:bc:af:97:05:74:d0:5b:e5:
03:75:d2:85:06:89:4c:28:63:c6:1e:fc:70:37:45:0f:db:64:
d6:46:f6:d6:d2:99:b9:75:60:10:58:03:ae:1d:87:cf:4e:94:
a9:40:95:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:10:55 2025 by rpki-client